Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/454bf46f-fc23-358c-a8ba-b6c9d96ddea4.roa
File: 454bf46f-fc23-358c-a8ba-b6c9d96ddea4.roa (raw, json)
Hash identifier: HdOEAYhTJxAfNcbEPLP+n3DTlJ+gA7nzR3bB7yVm3js=
Subject key identifier: E5:FD:A2:8A:0B:98:CD:50:B2:DE:09:61:AE:0A:B0:AE:5D:60:BE:66
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CC77ED4174F2C3BE06D439F80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/454bf46f-fc23-358c-a8ba-b6c9d96ddea4.roa
Signing time: Mon 31 Jan 2022 05:00:00 +0000
ROA not before: Mon 31 Jan 2022 05:00:00 +0000
ROA not after: Mon 07 Mar 2022 05:00:00 +0000
asID: 16509
IP address blocks: 40.176.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:c7:7e:d4:17:4f:2c:3b:e0:6d:43:9f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 31 05:00:00 2022 GMT
Not After : Mar 7 05:00:00 2022 GMT
Subject: CN=eb4ee972-fcab-45d9-873f-2e746bb4d5cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8f:ff:6c:97:05:ee:8b:e5:a4:18:f0:78:41:
56:ba:5b:12:74:75:3e:45:28:3f:77:b3:cb:12:c7:
15:63:94:8a:04:eb:a1:63:e0:2a:5b:80:6f:df:0a:
b8:0d:33:96:35:48:de:d0:9a:db:c8:66:ba:90:1f:
31:0e:08:ac:57:c0:e7:7b:34:aa:66:7c:f1:95:ad:
81:0a:01:ed:5e:03:ba:98:db:72:6a:9b:78:a6:d4:
f3:4c:3a:1a:e1:3a:e9:9d:21:94:6d:c3:bc:3e:9e:
43:57:0e:85:5e:3f:4e:d2:b0:ce:eb:46:28:78:49:
2c:c3:34:ab:c6:4b:ab:15:59:6e:dc:53:ea:2a:bc:
3a:e1:33:77:cd:2b:9d:c7:1b:58:7a:2c:d6:3c:d0:
ee:f2:a7:f2:9d:69:91:f7:67:65:e8:90:8b:a9:b1:
d4:cb:b1:27:0a:8c:3b:92:c7:a4:35:a4:0a:5f:cd:
c3:35:1a:53:ff:af:07:bf:ef:ac:bd:01:63:cc:21:
46:e4:ab:cb:81:46:5d:70:74:01:ca:ed:e3:1c:1b:
89:db:86:7d:fa:e4:52:f5:47:91:7b:fc:76:ce:7b:
9e:86:da:27:33:76:03:5b:ab:68:ff:cf:30:db:6f:
ee:b4:6d:b2:18:13:d9:22:9f:f5:47:eb:35:03:ca:
d7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FD:A2:8A:0B:98:CD:50:B2:DE:09:61:AE:0A:B0:AE:5D:60:BE:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/454bf46f-fc23-358c-a8ba-b6c9d96ddea4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.176.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:7c:6e:e8:3c:02:84:10:bd:58:15:5a:34:d0:f0:49:31:e4:
15:84:77:c9:a6:57:52:43:26:23:69:a4:b8:d5:2c:67:9c:d6:
3f:c8:6b:d8:0e:c9:42:1e:2f:54:37:cb:47:7a:f4:ba:87:76:
d3:39:c7:26:f9:49:b0:bb:35:c4:1b:e3:1a:d6:28:fe:3c:69:
a0:e3:cc:50:f8:5e:27:48:3b:1e:dd:68:11:70:dd:e2:b4:78:
b3:75:ac:e5:ea:1e:7e:d7:48:d9:53:87:de:eb:6f:03:c6:f3:
63:65:30:b5:62:b8:59:bb:bb:37:73:6c:31:c6:f1:e6:b4:5b:
b6:ea:5c:21:f3:0c:0e:d4:90:de:c3:8e:06:ca:49:59:7d:a6:
b6:22:72:16:f9:e3:49:8f:9f:d6:fe:e1:80:3d:13:d4:f9:c2:
ff:e0:27:ab:6c:32:60:45:dc:6e:a5:b8:d0:72:2d:fa:95:97:
9a:2e:d9:a0:fb:39:3a:e8:6e:b0:72:3a:2f:e4:2f:06:8e:69:
13:07:87:06:de:98:d2:61:bb:d7:49:fe:2c:b1:98:b5:bc:93:
76:76:bb:f3:2c:d0:94:7b:68:b0:bf:e1:dc:30:a6:71:9a:fe:
9c:b2:b2:71:72:a0:58:a4:84:e0:3b:5c:37:f6:57:ca:24:b7:
45:5e:d9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:06:11 2025 by rpki-client